Public Documentation

Lawie Docs

guideDifficulty: intermediateTime: 20mVersion: v1Services: webhooksSDK: @lawie/sdkReviewed: 2025-01-21Reviewer: Docs PlatformTags: webhooks, security

Secure Webhook Delivery

Validate webhook signatures and protect endpoints.

Overview

Validate webhook signatures and implement replay protection.

Prerequisites

  • Shared webhook signing secret
  • HTTPS endpoint for deliveries

Architecture Diagram

Webhook events traverse Lawie → gateway → your verification layer.

Steps

  1. Verify the Lawie-Signature header with your shared secret.
  2. Reject requests older than 5 minutes.
  3. Log delivery attempts for audits.

API Calls Referenced

  • POST /webhooks/v1/register
  • POST /webhooks/v1/verify

Troubleshooting

  • Invalid signatures → Ensure the secret matches Lawie Admin settings.